Out-of-Bounds Write Vulnerability in Adobe Illustrator
CVE-2025-49526

7.8HIGH

Key Information:

Vendor

Adobe
Status
Illustrator
Vendor
CVE Published:
8 July 2025

What is CVE-2025-49526?

Adobe Illustrator versions 28.7.6, 29.5.1, and prior iterations are susceptible to an out-of-bounds write vulnerability. This vulnerability can potentially allow an attacker to execute arbitrary code within the context of the current user. Exploitation of this vulnerability necessitates user interaction, as the target must open a maliciously crafted file, increasing the risk of compromise.

Affected Version(s)

Illustrator 0 <= 29.5.1

References

https://helpx.adobe.com/security/products/illustrator/aps...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.